<div>
<div class="content wysiwyg-content">
We're setting up a content filter system using Dansguardian + squid. It's working pretty well doing differential filtering based on AD group. The problem we're having right now is that we want everything local to be bypassed, ie: any local domain / ip address etc should not use the proxy at all but all traffic going outside of our network should go through the proxy. Our wpad.dat file is pretty simple 
 
 
function FindProxyForURL(url, host) { 
 
 
// If specific URL needs to bypass proxy, send traffic direct. 
&nbsp; &nbsp; &nbsp; &nbsp; if (shExpMatch(url,&quot;*localdomain&quot;) || 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; shExpMatch(url,&quot;*.phobos.apple.com.edgesuite.net&quot;) || 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; shExpMatch(url,&quot;172*&quot;)) 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return &quot;DIRECT&quot;; 
else 
return &quot;PROXY proxyname:8080&quot;; 
} 
 
 
So anything matching localdomain in the URL field should not go through the proxy at all, same with urls that begin with 172. Our clients see the proxy and use it just fine but our bypass rules are not working. I have tried a number of different ways and seem to get the same results. 
 
 
Any ideas?
</div>
</div>

We're setting up a content filter system using Dansguardian + squid. It's working pretty well doing differential filtering based on AD group. The problem we're having right now is that we want everything local to be bypassed, ie: any local domain / ip address etc should not use the proxy at all but all traffic going outside of our network should go through the proxy. Our wpad.dat file is pretty simple


function FindProxyForURL(url, host) {


// If specific URL needs to bypass proxy, send traffic direct.
        if (shExpMatch(url,"*localdomain") ||
            shExpMatch(url,"*.phobos.apple.com.edgesuite.net") ||
            shExpMatch(url,"172*"))
                return "DIRECT";
else
return "PROXY proxyname:8080";
}


So anything matching localdomain in the URL field should not go through the proxy at all, same with urls that begin with 172. Our clients see the proxy and use it just fine but our bypass rules are not working. I have tried a number of different ways and seem to get the same results. 


Any ideas?

WPAD / Proxy

The Windows operating systems have distinct methodologies for designing and implementing networks, and have specific systems to accomplish various networking processes, such as Exchange for email, Sharepoint for shared files and programs, and IIS for delivery of web pages. Microsoft also produces server technologies for networked database use, security and virtualization.

Windows Networking

Microsoft Forefront, formerly known as Internet Security and Acceleration Server (ISA Server), is a network router, firewall, antivirus program, VPN server and web cache that runs on Windows servers. It includes identity management and protection systems, and discontinued systems for threat management and network protection, along with protection for Sharepoint and Exchange. The scope of discussions includes forward and reverse proxy, application and service publishing, virtual private networks (VPNs), outbound access rules, SSL certificates and network routing within either a single node or an highly-available array pairing.

Microsoft Forefront ISA Server

The Internet Protocol (IP) is the principal communications protocol in the Internet protocol suite for relaying datagrams across network boundaries, organized in abstraction layers, traditionally called "Link," "Internet," "Transport" and "Application”. Its routing function enables internetworking, and essentially establishes the Internet. IP defines packet structures that encapsulate the data to be delivered. It also defines addressing methods that are used to label the datagram with source and destination information.